Re: [nsp] Transparent cache-redirection

From: Bryan S. Blank (bryan@supernet.net)
Date: Thu Dec 02 1999 - 17:18:03 EST


% I can't see how this can be done with policy routing, so I'm
% guessing people do it using NAT or something similar?

        it's done with policy routing, actually

        route-map proxy-redirect permit 10
           match ip address 110
           set ip next-hop 10.10.10.10

        access-list 110 deny tcp 20.20.0.0 0.0.255.255 any eq smtp
        access-list 110 permit tcp any any eq smtp

        will send any smtp connections from 20.20.0.0/16 to 10.10.10.10

        carefully choose your rev of ios for best results of switching
        of policy routing ... you'll also needs bits on your unix box to
        accept the next-hop of the packets (transparent proxying) ...
        have fun

-----------------------------------------------------------------------------
Bryan S. Blank bryan@supernet.net
                                                           (443)394-9529 tele
                                                           (410)995-2191 page
                                                           (410)802-6998 emer



This archive was generated by hypermail 2b29 : Sun Aug 04 2002 - 04:12:08 EDT